How can I stop continuous failed logins on SQL Server

Darrell123 0 Reputation points
2023-07-18T23:36:10.5233333+00:00

How can I stop continuous failed logins on SQL Server, In the security event viewer, I am getting non stop failed login attempts to sql server with different names to login like jeff, steve, etc…

 

I do not have network tcp/ip enabled, I do have the sql native client tcp/ip enabled.   I have a firewall rule that should be blocking public traffic, but either it’s not working correctly, or I need to do something else.  I am blocking the port number for private and public, and only allow domain.  Is there any thing I missed? Or what should I do next?

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
14,441 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,665 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Olaf Helper 45,881 Reputation points
    2023-07-19T04:34:15.11+00:00

    the failed login in the even view kept happening.

    Do you see failed login attempts in SQL Server ErrorLog as well?

    Seems someone attacks your server. If SQL Server is down, then on Windows levele, not SQL. Isn't the source machine name/IP mentioned in the error message?


  2. Erland Sommarskog 116.5K Reputation points MVP
    2023-07-19T20:16:11.2133333+00:00

    We don't know exactly what you see, but if you see login failures on SQL Server in the Windows event log, even if you think you have stopped SQL Server, this tells us one of:

    • SQL Server is in fact still running.
    • You have a second instance of SQL Server on the machine.

    In any case, SQL Server should never be exposed directly on the internet, but only reachable from within your network.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.